how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 209d ago
05!privacymemo carries an email address, and this field is written to a public ledger
06✓rail integrityhorizon-submit, 1.6s skew, nonce fresh
07✓post approval integrityremit_tax unchanged since approval
why
data_leakemail_in_memo
memo carries an email address, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GA7Y2SGYSBKQNRFY3LO7ON75KAHS5IT5VY36HZPTES267TJXZK66RQ5G
- operations
- 1
- op 0 · movement
- 27946.3900223 XLM → GCTUINPFM5KIE6NGXUIBPBOOMF7O43WF4WJT4BKRDGZDSBEBT2TSGUSK
- memo (not trusted)
- invoice for m.chen@harbor.example
- tool_call (not trusted)
- remit_tax(vendor="harbor insurance")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- harbor insurance · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce bf0e95e84a7aeb4c · signed
- clock skew
- 1.6s against a 60s replay window
- tool approved
- remit_tax · e665569f96c89c4d9e57a853…
- tool executing
- e665569f96c89c4d9e57a853… · unchanged
- policy commitment
- 6058dd02440be2d1f6193e0a…
provenance
- mandate
- contractor payroll
- mandate hash
- 0e1c128739a05e8c073cba602543a210dcf6c7d1c61b125454590c2688a041ec
- rule hash
- 6058dd02440be2d1f6193e0ad3933111f6bd39563347707855fa880ccb4fa145
- request hash
- d808dfcde0fbfae4d6c7d9ab02af2f35ef32b2849b11c36201512dbb079d15e2
- transaction
- 7076086bb4cead28f872103e63417cc6a3cb3fa7156058ed0983cc07811c57e8
the receipt
- entry
- 4997 of 7560
- previous entry
- 760d08d6ea7d39b3b0344e302a8cbd2ad5a092b34582db947ea7f189cc45afe8
- leaf hash
- 7f666912ae517d4d7f15e500d9c75224ac46fdd04c3d15be2fb8e9aa548ca646
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- vH6wBb4ADQdyPvdyfq9SnDWGEi4tZUdF1ndnp0DBZsbqc9EaUOP6gP231dkn5nOJmtrHQIYbR9HyrTROgKcqAQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root ab4300211f…9c3585
0left760d08d6ea7d39b3b0…89cc45afe8
1right2ca815e7d5e25edcef…7871392a97
2leftb69660fcbc677c332b…3d01e6abbc
3right7baa5ab6e9e995859b…6bbea9ba23
4rightc7063d2441de0e6db7…c675475e3f
5right8c08b22b55b9c630b2…9341a350ae
6right8133322a542e4bc11e…ee68e3ceeb
7left79f7450aea35c41d62…5e9e49deb3
8leftaf2867073a354f4d40…d7f24e6c47
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11right9191ac0041bcc7b810…2cdb31d8e7
12leftdc8527842d65829ab0…fb53df942a
root
ab4300211fb874d981d4f754451c23640d56937bf89acf0af663d1f5f79c3585